No idea. Our scanners are real-time scanners... I'm not sure what else caused this. It's obvious it's some sort of process that runs in regular mode that is disabled in safe mode that is causing this. Thing is I don't know how I can get to the task manager from the logon screen to do a spot-check and see what's running and if anything looks suspicious.
For now I think we'll back it up and blast it. But otherwise, I have no idea what else to do.